quickbooks
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. This skill is explicitly designed for financial operations (QuickBooks integration) and exposes actions that create and record monetary transactions. The prompt lists domain-specific actions such as Create Payment, Create Bill, Bill Payment, Transfer, Create Invoice, Create Purchase Order, Create Account, etc., and documents how to run those actions via Membrane (including running actions with input JSON). Membrane handles authentication and runs QuickBooks API actions, so the agent can invoke endpoints that record/pay/transfer funds or otherwise execute accounting transactions. This meets the "send transaction"/direct financial execution criterion.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata